Behavioral task
behavioral1
Sample
f05a9640485a69325cef81db4dfdb35b_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
f05a9640485a69325cef81db4dfdb35b_JaffaCakes118
-
Size
747KB
-
MD5
f05a9640485a69325cef81db4dfdb35b
-
SHA1
592b018bffa3e98bb18fc4a2bc7caa5f9786fd40
-
SHA256
e336c37df84e24eade0b7b9a0f8520cbf5c320fd6df16bb0ba28b6da50537665
-
SHA512
7d622709ff95b3c12f99a33b94da9d63f435c2464fa9d9f799344e3917378e43e32f782cd3b4aaa2ecac7aa17f7a6b939b3acdf5be7a37b746c10b2cb43207cc
-
SSDEEP
12288:NXhe43enaF7NByV5egKzkeZp3mwnWPLqzARfjkM+trBvcylDiWc294lf96GAs0:phe5a9NA5egKzkeZpyqifQttv8WJ2fSV
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f05a9640485a69325cef81db4dfdb35b_JaffaCakes118
Files
-
f05a9640485a69325cef81db4dfdb35b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 722KB - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE